On 7 May 2026, negotiators from the Council of the European Union, the European Parliament, and the European Commission reached a provisional agreement on the terms of the Digital Omnibus on AI, marking the first set of amendments to the EU AI Act since its adoption in June 2024. The final package of amendments reflects
Inside Privacy
Inside Privacy Blogs
Blog Authors
Latest from Inside Privacy
Maryland Enacts Law on Personalized Food Pricing
On April 28, 2026, Maryland Governor Moore signed HB 895 (the Protection From Predatory Pricing Act) into law, which will impose limitations on the use of personalized pricing in the food retail and grocery delivery context. The law will go into effect on October 1, 2026. As we have detailed in prior blog posts, there…
Italian DPA Publishes Guidelines on Email Tracking Pixels
On April 17, 2026, the Italian data protection authority (the “Garante”) published Provision No. 284 setting out guidelines on the use of “tracking pixels” in emails (the “Guidelines”). This publication closely follows the recommendation issued by the French data protection authority on the same topic, which is discussed in a separate blog post available here…
EU Sets the Clock on Age Verification: Rollout Urged by End‑2026
The European Commission has set a clear timeline for rolling out age verification across the EU:
- by June 30, 2026, Member States are encouraged to submit implementation plans; and
- by December 31, 2026, at least one EU‑compliant age verification solution should be available in each Member State.
This timeline, set out in the Commission’s (non-binding)…
Three notable changes to the UK ICO’s guidance on cookies, and a hint of a more permissive approach to advertising cookies in the future
On 29 April 2026, the UK Information Commissioner’s Office (“ICO”) updated its guidance on the use of storage and access technologies (i.e., cookies and other technologies that store or access information stored on users’ devices) under Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (“PECR”). These updates follow on the heels of two…
DC AG Sues Multifamily Landlord Over Alleged Deceptive Rental Fee Advertising
On April 27, 2026, District of Columbia Attorney General Brian L. Schwalb filed a complaint against Mid‑America Apartment Communities, Inc., and its subsidiaries (collectively, “MAA”) alleging that the landlord charged illegal fees and misled prospective tenants about the true cost of rent. This action is the latest example of state and federal enforcement scrutiny of…
FTC Sweep on “Made in the USA” Claims
On April 14, 2026, the FTC announced three settlements and issued closing letters to two additional companies concerning “Made in America,” “Made in the USA,” and similar U.S.‑origin claims (collectively, “MUSA claims”). These actions reflect the FTC’s continued focus on MUSA claims and, more broadly, the Trump administration’s focus on American manufacturing and related claims…
UK ICO Consults on Draft Automated Decision-Making Guidance and Sets Expectations for ADM in Recruitment
On 31 March 2026, the UK’s Information Commissioner’s Office (“ICO”) launched a public consultation on draft updated guidance on automated decision-making (“ADM”), including profiling (“Draft Guidance”) and simultaneously published a report on the use of ADM in recruitment (“Recruitment Report”).
The Draft Guidance is the ICO’s first detailed interpretation of the Data (Use and Access)…
CNIL Publishes Recommendation on Email Tracking Pixels
…
Singapore Issues Governance and Security Guidance for Agentic AI
As agentic AI systems move from research labs to enterprise workflows, regulators worldwide are grappling with how to address the potential risks these systems may pose (as discussed in prior blog posts here and here). In January 2026, Singapore’s Infocomm Media Development Authority (“IMDA”) launched a non-binding Model AI Governance Framework for Agentic AI…